Description

Cross-site scripting (XSS) vulnerability in the OCS discovery provider component in ownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a URL.

Remediation

References

CVE-2016-1498

Related Vulnerabilities

WordPress Plugin GlotPress Information Disclosure (2.2.1)

Ruby on Rails URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-22881)

ownCloud Improper Access Control Vulnerability (CVE-2014-2048)

Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-6205)

WordPress Plugin WebLibrarian Cross-Site Scripting (3.4.8.6)

Severity

Medium

Classification

CVE-2016-1498 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities